EXPRESS MAIL NO. EK966291630US PATENT 

Docket No. 01-8001 

Claims 

What is claimed is: 

1. A method for parsing of nested electronic mail documents over a computer 
network, the metnod comprising the steps of: 

retrieving a Wnplaint from a complainant about an incident over the computer 
network; 

parsing the complaint into a plurality of components; 
normalizing one ofSXhe plurality of components; and 

performing an analysis protocol on one of the plurality of components to extract 
information relating to the contolaint. 

2. The method of Claim 1, ^herein the parsing step includes locating a header in one 
of the plurality of components. 

3. The method of Claim 2,^urth\r including the step of locating a header keyword in 
the header. 

4. The method of Claim 3, wherein ihe normalizing step includes removing one or 
more characters from the header based on the header keyword. 

5. The method of Claim 1, further including the step of locating a Received line in 
one of the plurality of components. 

6. The method of Claim 5, further including\he step of validating a source IP 
address from the Received line. 

7. The method of Claim 6, wherein the source n\is validated by locating one or 
more delimiters in the Received line. 
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8. The method\f Claim 1, further including the step of categorizing the complaint. 

9. The method of §laim 8, wherein an action is taken by a user based on the 
category of the complain? 

10. The method of ClaiA 1, wherein the extracted fields comprise one of a complaint 
tracking code, a source IP add\ess, a Received Line, a First Line, a URL, and a body of 
one of the plurality of components. 

1 1 . The method of Claim 10, vwierein the extracted fields form a record of a database. 

12. A method for parsing of nested electronic mail documents over a computer 
network, the method comprising the stops of: 

retrieving a complaint from a complainant about an incident over the computer 
network; 

parsing the complaint into a bodjl and\a/n jader; 

normalizing the body and the header of the complaint; and 

extracting specific fields from the body anqj the header of the complaint using an 
analysis protocol. 

13. The method of Claim 12, further including the\step of locating a header keyword 
in header of the complaint. 

14. The method of Claim 13, further including the ste\> of removing one or more 
characters from the header based on the header keyword. 

15. The method of Claim 12, further including the step 8f locating a Received line in 
the header of the complaint. 
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16. The method of Claim 15, further including the step of validating an IP address of 
a source of the cqmplaint from the Received line. 

17. The method of Claim 16, wherein the IP address of the source of the complaint is 
validated by locating ome or more delimiters in the Received line. 

18. The method of Claim 12, further including the step of categorizing the complaint 
to determine an action takenvby a user based on the category of the complaint. 

19. The method of Claim l\wherein the extracted fields comprise one of a complaint 
tracking code from the header orthe complaint, an IP address from the header of the 
complaint, a Received Line from ttte header of the complaint, a First Line from the body 
of the complaint, and a URL from th^ body of the complaint. 

20. A system for processing a comj}{aintj£ceived over a computer network, 
comprising: 

a message parser adapted to bre^aVne^sage into a plurality of message 
components; 

a normalizer for converting at least one the plurality of message components 
into a common presentation format associated wit\ that message component; and 

an analysis protocol adapted to analyze the plurality of message components by 
way of the common presentation format. 

21. The system of Claim 20, wherein the analysis protocol further includes an 
extractor adapted to isolate specific information of the message in accordance with 
predetermined criteria. 

22. The system of Claim 21 , wherein the extractor searches f^- at least one of an IP 
address, a domain name, and an electronic mail address. 
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23. The system of ClWim 22, wherein the extractor identifies an alphanumeric 
character associated with trie IP address, the domain name or the electronic mail address. 

24. The system of Claim wherein the message components include a header and a 
body. 

25. A system for processing a complaint relating to a service disruption over a 
computer network, comprising: 



an organization for proviauig services for a complainant on a computer 



network, 



wherein the organization retrieves a con^plaint from the complainant relating to 
the service disruption and processes the complainkby parsing the complaint into a 
plurality of components, normalizing the plurality oKcomponents, and extracting specific 
fields from at least one of the plurality of components of the complaint. 

26. The system according to Claim 25, wherein one of t^ specific fields comprises a 
source IP address. 
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